Digital transformation has multiplied business opportunities, but it has also increased the risks associated with information security and internal organizational management. Today, unauthorized access and internal fraud represent two of the most complex threats for companies of any size, as they often originate within the organization itself and can go undetected for long periods.

The 2024–2025 period confirmed phishing as one of the main global cyberattack vectors. After a slight decline in 2024, attacks in 2025 once again exceeded one million per quarter, reaching more than 1,130,000 in the second quarter and consolidating this figure as the new benchmark.

Beyond volume, its impact is structural: 37% of global breaches begin with phishing or associated malware, maintaining it as a primary entry point in critical incidents.

In the financial sector, between 59% and 66% of ransomware and extortion cases begin with phishing campaigns, while pretexting and BEC account for between 24% and 25% of financial attacks, reinforcing their role as a common source of significant economic losses.

The legal sector handles a large amount of confidential information and sensitive data that must be protected, such as contracts, legal proceedings, corporate operations, financial data, negotiation strategies, and other personal and business information, making law firms a target for cybercriminals. The more valuable the documentation, the higher the reward and the amount attackers may demand for its recovery.

More than a 100% increase in cyberattacks against transportation and logistics in recent years, and over 60% of incidents aimed at disrupting the supply chain, confirm a clear reality: the high economic impact and strong technological interconnection of the sector are making logistics operators one of the most attractive and valuable targets for cyberattacks.

In this context, cybersecurity is no longer an isolated technical issue, but a key element to ensure operational continuity. Implementing a comprehensive cybersecurity plan in logistics operators is not just a preventive measure—it is a necessity to protect critical processes and prevent disruptions in the supply chain.

The legal sector has become one of the most attractive targets for cybercriminals over the past decade. Law firms and legal departments handle extremely sensitive information, from client personal data to litigation strategies and confidential communications, which puts them directly in the crosshairs of cyberattacks.

Protecting this information is a strategic priority, not only to prevent financial losses but also to safeguard reputation and maintain trust in the practice of law.

Some time ago, we discussed the importance of cybersecurity in the healthcare sector, outlining the current landscape of cyberattacks and why investing in IT security is crucial. We explained the most common and frequent cyberattacks in this sector that have caused significant disruption in hospitals, the most serious being at the Hospital Clínic of Barcelona.

Financial institutions have gone from 400 cyberattacks per year in 2012 to 1,500 in 2020, according to a study by the International Monetary Fund. This is an alarming figure, considering that many of these attacks succeed in their goal: stealing users’ banking data. Ginp, Ghimob… are some of the most common banking cyberattacks today.